Privacy Policy
Effective 15 July 2026
This policy explains what personal data pitchdeck.my collects, why, and how we protect it. It applies to anyone who visits pitchdeck.my, creates an account, backs a project as a customer, or submits a business for listing.
1. Who we are
pitchdeck.my (“we”, “us”, “the platform”) operates a marketplace connecting Malaysian founders with customers and backers. If you have questions about this policy, contact us at hello@pitchdeck.my or WhatsApp +60 18-279 3151.
Note: pitchdeck.my is a listing and information platform only. We do not offer, sell, endorse, or advise on any securities or investment — see our Terms of Service for details.
2. What data we collect
We collect the following categories of data:
- Account data: name, email address, and authentication details when you sign up or log in (including via Google, if you choose that option).
- Profile & project data: business information, documents, and media you submit when listing a project, including anything you provide for Verified Pitch review (accounts, permits, operational records, walkthrough video).
- Interest & slot data: which slots you claim, your message to a founder, and related transaction/status records (claimed, released).
- Communications: messages you send us via WhatsApp, email, or on-platform contact forms.
- Technical data: basic device, browser, and usage data collected automatically (e.g. via cookies or hosting logs) to keep the site secure and working.
3. How we use your data
We use your data to:
- Create and manage your account, and keep you logged in securely.
- Show your project listing publicly once it is approved, including live slot counts.
- Connect founders and backers — for example, sending a founder your Register Interest details.
- Review and verify listings for Verified Pitch (Pre-screening and Pro tiers).
- Communicate with you about your account, listing, or a claim you've made.
- Maintain the security, integrity, and basic analytics of the platform.
4. Who we share data with
We do not sell your personal data. We share data only with the service providers that run the platform, and with other users where the platform is designed to connect you (for example, a backer’s Register Interest details are shared with the project’s founder so they can follow up).
Our infrastructure and processors currently include:
- Supabase — database, authentication, and file storage.
- Vercel — application hosting and delivery.
- Google — optional sign-in (Google OAuth), if you choose to use it, and underlying AI/image tooling used to generate site imagery (not your personal data).
We may also disclose data where required by law, to protect the rights or safety of our users, or in connection with a business transfer (e.g. a merger or acquisition), in which case we would notify affected users.
5. Cookies & authentication
We use essential cookies to keep you signed in and to maintain your session (via Supabase Auth). We do not currently use third-party advertising or tracking cookies. If that changes, this policy will be updated and, where required, we will ask for your consent.
6. Data retention
We keep account and project data for as long as your account is active, and for a reasonable period afterwards to meet legal, accounting, or dispute-resolution needs. You can ask us to delete your account and associated personal data at any time (see Section 7); some records may be retained where we have a legal obligation to do so.
7. Your rights
Subject to Malaysia’s Personal Data Protection Act 2010 (PDPA), you may have the right to:
- Ask what personal data we hold about you, and request a copy.
- Ask us to correct inaccurate or incomplete data.
- Ask us to delete your account and personal data, where legally possible.
- Withdraw consent for optional processing (e.g. an optional sign-in method) at any time.
To exercise any of these rights, email hello@pitchdeck.my. We will respond within a reasonable time.
8. Data security
We rely on our infrastructure providers’ security controls (encryption in transit, access controls, row-level security on our database) and restrict internal access to personal data to what is needed to operate the platform. No system is 100% secure, and we cannot guarantee absolute security of data transmitted to us.
9. Children
pitchdeck.my is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will remove it.
10. Changes to this policy
We may update this policy as the platform grows (for example, when new features like the founder dashboard or admin approval flow go live). We will update the effective date above when we do. Material changes will be flagged on the site.
11. Contact
Questions about this policy or your data: hello@pitchdeck.my · WhatsApp +60 18-279 3151.